medium-gke-4

apiVersion: v1
kind: Pod
metadata:
  name: pod-without-sa
  namespace: default
spec:
  containers:
  - image: gcr.io/google.com/cloudsdktool/cloud-sdk:slim
    name: pod-without-sa
    stdin: true
    tty: true
---
apiVersion: v1
kind: Pod
metadata:
  name: pod-with-sa
  namespace: default
spec:
  serviceAccountName: mypodserviceaccount
  containers:
  - image: gcr.io/google.com/cloudsdktool/cloud-sdk:slim
    name: pod-with-sa
    stdin: true
    tty: true
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: mypodserviceaccount
  namespace: default
  annotations:
     iam.gke.io/gcp-service-account: gke-workload@PROJECT_ID.iam.gserviceaccount.com